Anthropic's documentation explains how to configure OpenTelemetry destinations in the Claude Console to receive spans from Messages API requests and Managed Agents sessions. Admins define an OTLP/HTTP endpoint with authentication headers and select a content mode to control how much prompt data is shared. Once enabled, spans arrive at the chosen observability platform and can link to application traces via W3C trace context propagation.
- Delivery is at-least-once and best-effort, meaning spans may duplicate or be lost.
- Destinations are automatically disabled if they return a 3xx redirect, resolve to a non-public IP, or fail continuously for 24 hours.
- HIPAA, FERPA, or K-12 compliance restrictions can force content to metadata-only regardless of settings.
- Claude Platform on AWS currently does not support the W3C `traceparent` header, so spans always start their own traces.
- Delivery is at-least-once and best-effort, meaning spans may duplicate or be lost.
- Destinations are automatically disabled if they return a 3xx redirect, resolve to a non-public IP, or fail continuously for 24 hours.
- HIPAA, FERPA, or K-12 compliance restrictions can force content to metadata-only regardless of settings.
- Claude Platform on AWS currently does not support the W3C `traceparent` header, so spans always start their own traces.
Shivansh Raj Srivastava writes that he used Claude as a coding agent to build a free Chrome extension that brings macOS-style Quick Look to web links. By pressing Space while hovering over a link, users can preview a page in a frosted panel without opening a new tab. The project was completed in a single day of heavy multitasking, producing roughly 4,800 lines of code and multiple preview modes including live, reader, and media. The author notes that the agent's ability to find and fix bugs was the real value of the workflow, resulting in a functional tool that requires manual installation as an unpacked extension.
- A secondary Claude agent identified a security hole in version 1.0 where any website could embed and drive the preview panel.
- The extension refuses to preview action links like "Log out" or "Delete" unless explicitly authorized, showing a warning bubble instead.
- YouTube retains its native Spacebar functionality, so users must use Shift+Space to trigger the preview on that site.
- A secondary Claude agent identified a security hole in version 1.0 where any website could embed and drive the preview panel.
- The extension refuses to preview action links like "Log out" or "Delete" unless explicitly authorized, showing a warning bubble instead.
- YouTube retains its native Spacebar functionality, so users must use Shift+Space to trigger the preview on that site.
Runx is an Apache-2.0 open source runtime built primarily in Rust that executes "agent skill workflows" by treating skills as portable operating manuals (`SKILL.md` files) and composing them into verifiable graphs. It positions itself not as an orchestration framework or vector store, but as a governance layer beneath agents that admits actions under explicit authority, manages credentials without exposing them to prompts, and seals execution results into verifiable receipts. The system enforces strict boundaries where authority narrows through the execution chain, ensuring that deterministic operations, process tools, and agent steps operate within tightly scoped grants.
- The core execution invariant follows a strict pipeline: admit, resolve grant, deliver credentials, execute, and seal.
- Skills are defined by a `SKILL.md` for human-readable knowledge and an optional `run.yaml` for machine-checkable execution contracts and step definitions.
- Credentials are bound to specific environment variables via "connectors," ensuring that the runtime delivers secrets to operations without ever copying them into skill contexts or receipts.
- The project includes a hosted catalog at runx.ai for publishing skills and verifying receipt provenance, though the local CLI can operate independently of any hosted services.
- Recent development focuses on a "hard cutover" to a unified architecture with five distinct step kinds (agent, operation, tool, ask, skill) and a consolidated run record system.
- The core execution invariant follows a strict pipeline: admit, resolve grant, deliver credentials, execute, and seal.
- Skills are defined by a `SKILL.md` for human-readable knowledge and an optional `run.yaml` for machine-checkable execution contracts and step definitions.
- Credentials are bound to specific environment variables via "connectors," ensuring that the runtime delivers secrets to operations without ever copying them into skill contexts or receipts.
- The project includes a hosted catalog at runx.ai for publishing skills and verifying receipt provenance, though the local CLI can operate independently of any hosted services.
- Recent development focuses on a "hard cutover" to a unified architecture with five distinct step kinds (agent, operation, tool, ask, skill) and a consolidated run record system.
Seyed Ehsan Hadi writes about a local command-line tool and agent plugin that scores prose files for LLM-writing patterns using only the Python standard library, with no network access and no model. It works by hooking into coding agents like Claude Code to evaluate files saved on disk, flagging 71 documented patterns to prompt rewrites.
- Uses stylometry and lexical checks rather than an LLM
- Achieved a ROC-AUC of 0.946 on the GPT-4o benchmark arm
- Supports 20 file formats including .docx, .epub, and .ipynb
- Explicitly warns against using its scores as an authorship classifier
- Uses stylometry and lexical checks rather than an LLM
- Achieved a ROC-AUC of 0.946 on the GPT-4o benchmark arm
- Supports 20 file formats including .docx, .epub, and .ipynb
- Explicitly warns against using its scores as an authorship classifier
Colonel Panic sells open-source, ESP32-S3 based counter-surveillance hardware that passively detects drones, body cams, license-plate readers, and other monitoring devices. The flagship OUI SPY board ($85) runs "Unified Blue" firmware with six modes, including Sky Spy for FAA drone Remote ID, a multi-target BLE scanner that flags axe-on body cams and Taser 7/10, a headless AXEOFF beeper, a Foxhunter proximity tracker, Flock-You for Flock camera detection, and raw Wi-Fi/BLE capture for Wireshark. The mesh-detect v2 ($110) pairs a Seeed XIAO ESP32-S3 with a Heltec LoRa 32 V3 for 5–15 km distributed drone detection and real-time web mapping over Meshtastic. The project has drawn significant press attention—from EFF, Forbes, the Wall Street Journal, and Hackaday—after being credited with spurring local council action against Flock Safety cameras and being featured on the DEF CON 34 main stage.
- A Nerd Nite talk in Asheville is credited by the WSJ with directly prompting the city council to vote against Flock Safety.
- AXEOFF detects axe-on body cams, Taser 7/10, and Signal devices without a UI—just proximity beeps.
- A transparent flexible PCB patch version of the OUI SPY ($75) is sewable onto clothing as a punk art statement.
- A "Flock-You" mode exists but the site admits Flock rapidly changes firmware, so detection coverage is limited.
- Skull earring PCBs ($25) are sold as artistic DIY kits compatible with XIAO ESP32-S3.
- A Nerd Nite talk in Asheville is credited by the WSJ with directly prompting the city council to vote against Flock Safety.
- AXEOFF detects axe-on body cams, Taser 7/10, and Signal devices without a UI—just proximity beeps.
- A transparent flexible PCB patch version of the OUI SPY ($75) is sewable onto clothing as a punk art statement.
- A "Flock-You" mode exists but the site admits Flock rapidly changes firmware, so detection coverage is limited.
- Skull earring PCBs ($25) are sold as artistic DIY kits compatible with XIAO ESP32-S3.
Simon Willison writes about the release of Python 3.15 and the retirement of 3.10, highlighting new features and the practical implications for open-source maintainers.
- Explicit lazy imports (PEP 810) allow modules to be loaded only when symbols are first used, directly reducing startup time for CLI tools with heavy optional dependencies.
- PEP 798 introduces unpacking syntax for lists, sets, and dictionaries within comprehensions.
- A new low-overhead sampling profiler named Tachyon is now built into the standard library, capable of attaching to running processes and generating flame graphs.
- The experimental JIT compiler showed a 1.2x performance boost on specific benchmarks, marking the first time a meaningful increase was observed.
- Python 3.10 has reached end-of-life, allowing developers to adopt 3.11 features such as `tomllib`, `asyncio.TaskGroup`, and improved SQLite extensions.
- Explicit lazy imports (PEP 810) allow modules to be loaded only when symbols are first used, directly reducing startup time for CLI tools with heavy optional dependencies.
- PEP 798 introduces unpacking syntax for lists, sets, and dictionaries within comprehensions.
- A new low-overhead sampling profiler named Tachyon is now built into the standard library, capable of attaching to running processes and generating flame graphs.
- The experimental JIT compiler showed a 1.2x performance boost on specific benchmarks, marking the first time a meaningful increase was observed.
- Python 3.10 has reached end-of-life, allowing developers to adopt 3.11 features such as `tomllib`, `asyncio.TaskGroup`, and improved SQLite extensions.
YOLO Studio is a cloud-based workspace for orchestrating coding agents like Claude Code, Codex, and Muse Code in parallel, each running in isolated Linux sandboxes. The platform features a Kanban board where users describe work and a background runner breaks it into cards, executes them concurrently, and manages dependencies. Agents can operate in "YOLO Mode" to bypass per-step permission prompts, and finished work returns as commits with merge clearance options. The service includes live preview tiles, one-command deployment to yolo.host, scheduled loops for recurring tasks, and goal-based tracking where agents gather evidence against defined metrics.
- Supports 30+ frameworks out of the box for live preview
- YOLO Host provides one-command deployment with option to attach custom domains
- "Goals" feature ties agent work to measurable outcomes (e.g., doubling signup conversion) with an evidence-review step
- Dependency-aware dispatching ensures blocked-by edges are resolved in order before downstream cards start
- Supports 30+ frameworks out of the box for live preview
- YOLO Host provides one-command deployment with option to attach custom domains
- "Goals" feature ties agent work to measurable outcomes (e.g., doubling signup conversion) with an evidence-review step
- Dependency-aware dispatching ensures blocked-by edges are resolved in order before downstream cards start
Anthropic reports that new defensive measures have reduced the amount of Claude reasoning data harvested by illicit distillers by roughly 90 to 99%. Distillation attacks involve covert, industrial-scale campaigns where foreign labs use fraudulent account networks to extract Claude's hidden reasoning transcripts and train smaller models to mimic frontier capabilities. Anthropic has deployed three categories of defenses: "preserved thinking" restrictions that prevent reasoning blocks from being moved between conversations, models, or accounts; a two-stage constitutional classifier that detects extraction attempts with under 0.1% false positives; and usage-limit and account-ban policies for repeat offenders. The company acknowledges trade-offs, including forfeiting meaningful revenue and requiring some developers to update integrations.
- Zhipu distilled cyber capabilities from US models for GLM-5.3, which NIST assessed as the most cyber-capable open-weights model released to date
- One distillation network managed over 20,000 fraudulent accounts simultaneously
- A PLA-affiliated user leveraged the Kimi distillation pipeline to analyze CCTV surveillance of a specific individual
- Zhipu distilled cyber capabilities from US models for GLM-5.3, which NIST assessed as the most cyber-capable open-weights model released to date
- One distillation network managed over 20,000 fraudulent accounts simultaneously
- A PLA-affiliated user leveraged the Kimi distillation pipeline to analyze CCTV surveillance of a specific individual
The vllm-sr organization has released a collection of "Decision 3.0" models, described as open multimodal foundation decision models designed for zero-shot classification. The collection includes multiple model variants of varying sizes to suit different use cases.
- Available model sizes range from a 26B parameter flagship to a 0.6B parameter edge model
- The series includes d3, d3-flash, d3-mini, d3-nano, d3-lite, and d3-edge
- This is the third iteration in the Decision series, following Decision 1.0 and Decision 2.0
- The collection has received 78 upvotes and features 74 unique contributors
- Available model sizes range from a 26B parameter flagship to a 0.6B parameter edge model
- The series includes d3, d3-flash, d3-mini, d3-nano, d3-lite, and d3-edge
- This is the third iteration in the Decision series, following Decision 1.0 and Decision 2.0
- The collection has received 78 upvotes and features 74 unique contributors
Asif Razzaq writes that Microsoft released Microsoft-Decision-1, a model post-trained from Qwen3.5-9B that scores fixed answer options with calibrated probabilities rather than generating text. The model is designed for routing, classification, verification, and agent control, offering a 32,768-token context window, 85 ms p50 latency, and 83.5% average accuracy across 36 internal benchmarks. It is available as a hosted API through Microsoft Foundry and OpenRouter at $0.042 per million input tokens with free output tokens, but it has closed weights and text-only limitations.
- Latency comparisons against competitors are disputed because Microsoft used its own measurement while citing JevBench adjusted figures for others
- The model achieves zero decision flips under paraphrasing, reversal, or option-shuffling perturbations
- Internal Microsoft use cases report 14-100x speed advantages over GPT-6 Sol in feedback sorting and quality control
- Latency comparisons against competitors are disputed because Microsoft used its own measurement while citing JevBench adjusted figures for others
- The model achieves zero decision flips under paraphrasing, reversal, or option-shuffling perturbations
- Internal Microsoft use cases report 14-100x speed advantages over GPT-6 Sol in feedback sorting and quality control
